An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade rubygem-powerbarUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade foreman-cliUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hashieUpgrade rubygem-netrcUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-clampUpgrade rubygem-oauthUpgrade satellite-cliUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-version_gemUpgrade rubygem-http-cookieUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-maintainUpgrade rubygem-unicodeUpgrade rubygem-http-acceptUpgrade rubygem-ffiUpgrade satellite-cloneUpgrade rubygem-oauth-ttyUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-mime-typesUpgrade rubygem-domain_nameUpgrade rubygem-gssapiUpgrade rubygem-snaky_hashUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-jwtUpgrade rubygem-ffi-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-mime-types-dataUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unfUpgrade rubygem-fast_gettextUpgrade rubygem-little-plugger | May 4, 2023 | May 26, 2022 |
| Debian | — | Upgrade rails | Sep 6, 2022 | May 26, 2022 |
| Freebsd | — | Upgrade rubygem-actionview61Upgrade rubygem-actionpack61Upgrade rubygem-actionview52Upgrade rubygem-actionpack60Upgrade rubygem-actionpack52Upgrade rubygem-actionview70Upgrade rubygem-actionview60Upgrade rubygem-actionpack70 | Nov 4, 2022 | Apr 30, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-localeUpgrade rubygem-hashieUpgrade rubygem-powerbarUpgrade rubygem-highlineUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-display_widthUpgrade rubygem-oauthUpgrade rubygem-clampUpgrade rubygem-hammer_cliUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-rest-clientUpgrade foreman-cliUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-amazing_printUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade satellite-maintainUpgrade satellite-cliUpgrade rubygem-oauth-ttyUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unicodeUpgrade rubygem-unicode-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-netrcUpgrade rubygem-fast_gettextUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unfUpgrade rubygem-mime-types-dataUpgrade rubygem-ffiUpgrade rubygem-ffi-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-http-acceptUpgrade rubygem-mime-typesUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-jwtUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-domain_nameUpgrade satellite-cloneUpgrade rubygem-little-pluggerUpgrade rubygem-unicode-debuginfo | May 4, 2023 | May 26, 2022 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfo | Mar 12, 2024 | May 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub